CVE-2017-8652

MEDIUM

Microsoft Edge - Information Disclosure via Memory Object Handling

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-8652. PoCs published by Google Security Research.

AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2017-8652, a use-after-free vulnerability in Microsoft Edge. The PoC triggers a memory corruption issue by manipulating DOM elements and event handlers, leading to potential memory disclosure or remote code execution.

Description

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8644 and CVE-2017-8662.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · htmldoswindows_x86-64

https://www.exploit-db.com/exploits/42445

View Code ZIP pw:eip

This is a proof-of-concept exploit for CVE-2017-8652, a use-after-free vulnerability in Microsoft Edge. The PoC triggers a memory corruption issue by manipulating DOM elements and event handlers, leading to potential memory disclosure or remote code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Microsoft Edge 38.14393.1066.0, Microsoft EdgeHTML 14.14393

No auth needed

Prerequisites: Victim must visit a malicious webpage using Microsoft Edge

MITRE ATT&CK

T1189 - Drive-by Compromise T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/100047

Patch, Vendor Advisory x_refsource_confirm

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8652

Third Party Advisory, VDB Entry exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/42445/

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1039101

Scores

CVSS v3 6.5

EPSS 0.6166

EPSS Percentile 98.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

microsoft/edge

Microsoft Corporation/Microsoft Edge Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.

Published Aug 08, 2017

Tracked Since Feb 18, 2026